Guess what happened

[Glacialis]

What I've experienced is someone using Google to find sites with excitable versions of whatever software it is, usually through the version number at the bottom of the page. Happened to me several times during my tenure as a phpBB admin.

The fact that this hacker chose to notify is a good thing.

[sshagent]

Yup, exactly as Glacialis puts it.  Ebil types, will google for vulnerable platforms to do their work on. 

The fact this guy has given you a weeks notice is a tad odd.  Struggling to come up with a motivation why someone would use their own time to warn randoms of vulnerable software :S

[Nifelhein]

Well, the only thing he didnt do was delete the files, but I can't know fur sure whether he tampered with them, so used a clean backup to replace the ones on the server anyways. Same work for me.

As for version numbers, not much we can do, it is part of the terms of use of both softwares we use to have it on the bottom of pages.

[constant]

I was away from my usual lurking for a few months and missed the site coming back online. Just wanted to give a late thanks to Nif for putting put with all this hacking crap and keeping the site running.

[Nifelhein]

[DaveTheMagicWeasel]

So, I tried logging on yesterday but was met with a page saying "Hacked", followed by some childish leet speak about "re4enge".

Obviously fixed now, but since it's not been mentioned that I can see, in case you don't know Nif - this loser is still hanging around and the holes in the site security seem to still be there.

[Nifelhein]

I met the same thing, it was actually a server side vulnerability, they fixed it on their side and assured me no data was lost or database was accessed, meaning our mail and personal information like passwords are safe.

[Pheros]

yeah, saw the same thing.  Thanks for keeping us up and running Nif.

[Luiniel Blades]

Hmm, correct me if I'm wrong here but does this seem like a copy cat hacker to anyone else.  The first time this happened, I was under the impression this guy was a threat and was trying to be legitimately serious.  It seems strange that whoever this guy was is still messing around with the site months later and is suddenly talking in leet speak, unless he was doing it before.  It feels more like some kid was lurking on the site, found the conversation topic, got bored one day and decided he would show off his "l33t h4ckin9 ski115" while pretending to be this guy who was causing trouble before. 

Here comes the Midnight variant: The guy from before felt like a rather powerful Demon from the Aruun and now we have a lesser Demon trying to fill in the power gap. (Yeah that's right, I'm a nerd.)

[Nifelhein]

Hahahaha, a good plot though.

In any case the problem now was not in the site, it was on the server itself, which makes me fell a lot better actually, they upgraded whatever was flawed and we should not see a hack again. (Hopefully).